OTL Extras logfile created on: 2015-03-06 11:42:45 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Rafal\Downloads\Nowy folder 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17631) Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd 7,91 Gb Total Physical Memory | 5,99 Gb Available Physical Memory | 75,83% Memory free 15,91 Gb Paging File | 13,66 Gb Available in Paging File | 85,87% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 921,86 Gb Total Space | 720,91 Gb Free Space | 78,20% Space Free | Partition Type: NTFS Computer Name: BTN | User Name: Rafal | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-1519394715-568157097-3327672735-1001\SOFTWARE\Classes\] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = AC 1C AE C5 46 9F CE 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = [binary data] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = Reg Error: Unknown registry data type -- File not found [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access -- (Safer-Networking Ltd.) "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.) "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.) "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.) "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot - Search & Destroy tray access -- (Safer-Networking Ltd.) "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service -- (Safer-Networking Ltd.) "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater -- (Safer-Networking Ltd.) "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service -- (Safer-Networking Ltd.) [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{02E2D2C1-701F-4F48-9F4D-DD23F188AA28}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{1C5E32EA-4334-45C2-9FFC-C1A2E1DA4959}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | "{74CD5EF8-7A9B-466E-9A77-C3F6547A9B82}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe | "{9D7A19CA-04F5-405F-A98E-D5DFD988C075}" = lport=47995 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{B12D3759-BBB2-4649-9C9A-F5177CEEE3C8}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{B961DDA8-E118-4899-8811-C530DFE16773}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{CA8007A8-82E8-4728-B9CD-3CFA1266E1EB}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "{EFEB207E-B6B5-4EFB-960E-E76548543C71}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{06BBD4DA-DF92-4B7B-97D5-68AD2F7449DA}" = protocol=17 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | "{0CFDD1CB-35BD-4848-8941-B53913180DD8}" = dir=out | name=@{microsoft.bingnews_3.0.4.268_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} | "{0D0FF287-CCB9-4EEE-92BC-1F22C4AAD438}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{163BBFB0-6511-4F5F-B8AB-053F1D6D7BB2}" = dir=out | name=@{microsoft.bingfinance_3.0.4.298_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/brandedapptitle} | "{18A81531-507B-4DA2-ABD3-EBB31BD2D6FF}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{19AEC5CB-4E51-48D6-909D-460113E690F5}" = dir=out | name=skype | "{236E22B1-F5D5-476D-AE89-696639355883}" = protocol=17 | dir=in | app=c:\users\rafal\appdata\roaming\utorrent\utorrent.exe | "{2AC58692-B289-45E3-99E2-CD78CF5A87DD}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{34CF4153-8B56-44F6-910C-136EAEB8F9A7}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector10\pdr10.exe | "{39CC0D50-65AF-439B-9846-A32F5CE249E7}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{3AE67EE5-CCB1-47E1-BD88-7D9728620422}" = protocol=58 | dir=in | app=system | "{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn | "{468A5FB9-39E4-4B7C-8FAB-B4B57335BF72}" = dir=out | name=onenote | "{4F2596D8-D242-4A1C-8A67-F25CCE097D53}" = dir=out | name=@{microsoft.bingmaps_2.1.3230.2048_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | "{50319566-50D7-4238-BB14-6A4062D1A16B}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\movie\powerdvd cinema\powerdvdcinema12.exe | "{527FDE3C-9ADD-45C4-AA2C-2D88B496DF9E}" = dir=out | name=mcafee® central for dell | "{5458CAD1-F25F-4868-8966-CB516958894A}" = dir=out | name=@{microsoft.zunemusic_2.6.653.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect | "{574C6DB8-3D61-4B2A-8E1C-BB312F58F0D2}" = dir=out | name=@{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | "{5A8E6703-9273-4C6E-99E9-3D36F005B1DC}" = dir=in | name=adobe revel | "{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect | "{67746FEE-50C7-4D1C-95E5-73E9A31652D5}" = dir=out | name=adobe revel | "{67CBA845-D60F-437E-BE32-E536DFC1EEBA}" = protocol=6 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | "{6B90AF13-DAE2-4D42-9961-3880C13A39B6}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.4.253_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} | "{74AE8DA2-957C-4E13-AE22-4F52ED96F30F}" = dir=out | name=windows_ie_ac_001 | "{7CD37A3D-0E8F-48A0-8ED4-250B8BF816C1}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | "{805FA8F9-8A50-47E8-81DA-A7CC384E0EEC}" = protocol=6 | dir=in | app=c:\users\rafal\appdata\roaming\utorrent\utorrent.exe | "{826ED3A8-E25A-413F-8A6D-53EF259D163B}" = dir=out | name=@{microsoft.bingsports_3.0.4.298_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/brandedapptitle} | "{8B16A061-E859-430A-BB4A-203AD1DE7C71}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | "{8B7DA98C-9A5C-4D04-A8A5-68A97362B3E7}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | "{9494F73D-6F2E-4C8F-8970-EE4569A0AA75}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe | "{967357E0-4D5B-4A45-8CCD-6D05821136C3}" = dir=out | name=@{microsoft.bingweather_3.0.4.298_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/brandedapptitle} | "{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{A10C1EEE-A48D-46A3-8FDE-3BBDAAB8B25A}" = dir=out | name=@{microsoft.bingtravel_3.0.4.309_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} | "{AA4E6C98-8633-4BCF-BD6F-07A2F4CE5E62}" = dir=in | name=mcafee® central for dell | "{ADCD0341-9FF2-4825-BC2D-BE33A0B18B84}" = protocol=17 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe | "{AE6EA0B7-8BC0-432F-B7FA-C526EA03F520}" = dir=in | name=skype | "{B04E3C3A-CA4F-41C6-BAFE-0C576552AE17}" = dir=out | name=@{microsoft.bingtranslator_1.11.0.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtranslator/resources/appname} | "{B1A0B776-BBBC-47BA-A072-6E1BE3914854}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.4.309_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} | "{D0A9A048-E5E8-40E0-A45B-DBBD55CBC2ED}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | "{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn | "{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn | "{DE64BBA0-67F4-4A86-A6BF-08FB4E35B443}" = dir=out | name=@{microsoft.zunevideo_2.6.434.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{E6DBFAC2-E00A-4711-8938-C8D8C498D91D}" = dir=in | name=onenote | "{EC760C63-88C2-40DD-968E-77D36CFD272E}" = protocol=6 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe | "{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn | "{EE411B79-8FA3-487C-8658-CD7A58876139}" = protocol=6 | dir=in | app=c:\program files (x86)\gameforgelive\gfl_client.exe | "{F620F730-D94F-4C17-93C6-5F719E5BD08D}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client | "{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client | "{F84B7FB9-CCBB-4C79-B0E9-AC36CA11919F}" = dir=out | name=flipboard | "{FBF05F2B-36F1-4086-8328-5EDF5FAC781E}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "TCP Query User{1310DEFB-C14A-4A59-863B-4CAF7BAA3F75}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "TCP Query User{5D775481-FE4C-43E6-8E11-37BB147FEB5E}C:\program files (x86)\gameforgelive\games\pol_pol\aion\nclauncher.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gameforgelive\games\pol_pol\aion\nclauncher.exe | "TCP Query User{E277AB98-5FB2-4CDF-B641-69A366C60209}C:\users\rafal\desktop\gry tymona\runtime\jre-x64\1.8.0_25\bin\javaw.exe" = protocol=6 | dir=in | app=c:\users\rafal\desktop\gry tymona\runtime\jre-x64\1.8.0_25\bin\javaw.exe | "UDP Query User{06206F16-BCB9-4FDE-8639-26B82DD1BFA0}C:\program files (x86)\gameforgelive\games\pol_pol\aion\nclauncher.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gameforgelive\games\pol_pol\aion\nclauncher.exe | "UDP Query User{64066619-0755-4524-9685-59AA189F4BB4}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "UDP Query User{757F4B37-D53C-4FEB-BA38-9DB3E1154248}C:\users\rafal\desktop\gry tymona\runtime\jre-x64\1.8.0_25\bin\javaw.exe" = protocol=17 | dir=in | app=c:\users\rafal\desktop\gry tymona\runtime\jre-x64\1.8.0_25\bin\javaw.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64) "{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64 "{90140000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{90140000-0015-0415-1000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010 "{90140000-0016-0415-1000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010 "{90140000-0018-0415-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010 "{90140000-0019-0415-1000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010 "{90140000-001A-0415-1000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010 "{90140000-001B-0415-1000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010 "{90140000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0415-1000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010 "{90140000-002C-0415-1000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010 "{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010 "{90140000-0043-0415-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (Polish) 2010 "{90140000-0044-0415-1000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010 "{90140000-006E-0415-1000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010 "{90140000-00A1-0415-1000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010 "{90140000-00BA-0415-1000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010 "{A9550052-52AD-414B-AB58-74F0D7DC8188}" = ESET Smart Security "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 347.52 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 347.52 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 347.52 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 2.2.3 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus Update 17.13.3 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.14.0702 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 17.13.3 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GfExperienceService" = NVIDIA GeForce Experience Service "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service" = NVIDIA Network Service "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 17.13.3 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController" = SHIELD Wireless Controller Driver "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.27 "{B5E06417-A4AC-4225-B36E-7E34C91616E7}" = Intel® Trusted Connect Service Client "{B7FB6426-C506-4F83-806A-F65B263FF03B}" = True Color "{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}" = WIDCOMM Bluetooth Software "DW WLAN Card" = DW WLAN Card "Office14.PROPLUS" = Microsoft Office Professional Plus 2010 "PC-Doctor for Windows" = Dell SupportAssist "SynTPDeinstKey" = Dell Touchpad "TeamSpeak 3 Client" = TeamSpeak 3 Client "WinRAR archiver" = WinRAR 5.20 (64-bitowy) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{05F1B866-2372-4E82-9AA8-C64FB11CEF8B}" = My Dell Client Framework "{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell Backup and Recovery "{17FFE63C-6734-4950-B488-134B5A2505F7}" = Dell Product Registration "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite 10 "{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 7.0 "{26A24AE4-039D-4CA4-87B4-2F83218025F0}" = Java 8 Update 25 "{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}" = CyberLink Power2Go 8 "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module "{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}" = Realtek Card Reader "{5DE67937-45D5-45E4-923C-0B7F7EC929A7}" = League of Legends "{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper "{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{82E73E8D-E1E7-45A4-A311-6D31492AA913}_is1" = AION Free-to-Play "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends "{95723791-2C44-454B-9220-C65D47D70E9C}" = WEBZEN Browser Extension "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1" = Gameforge Live 2.0.5 "{9E4750A7-90F6-4181-8A8A-B1ADF4216E93}" = Dell Update "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell Backup and Recovery - Support Software "{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}" = CyberLink PowerDirector 10 "{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy "{B455E95A-B804-439F-B533-336B1635AE97}" = NVIDIA PhysX "{B46BEA36-0B71-4A4E-AE41-87241643FA0A}" = CyberLink PowerDVD 12 "{BC8233D8-59BA-4D40-92B9-4FDE7452AA8B}" = Dell Digital Delivery "{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint 2.5 "{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas "{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F57CEB84-3D22-4657-8EDA-F8CD5217B83E}" = Mu "{f8476c72-fe9e-4c04-a537-40a60257e57d}" = True Color "{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center "Battle.net" = Battle.net "Disciples Reincarnation_is1" = Disciples Reincarnation "Google Chrome" = Google Chrome "Hearthstone" = Hearthstone "Heroes of Might and Magic 3 Complete_is1" = Heroes of Might and Magic 3 Complete "InstallShield_{05F1B866-2372-4E82-9AA8-C64FB11CEF8B}" = My Dell Client Framework "InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}" = CyberLink Media Suite Essentials "League of Legends 3.0.1" = League of Legends "Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 2.0.4.1028 "NETIA Mobilny Internet" = NETIA Mobilny Internet "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "VLC media player" = VLC media player [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1519394715-568157097-3327672735-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "73f463568823ebbe" = Dell System Detect "uTorrent" = µTorrent [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2015-02-21 04:36:16 | Computer Name = Btn | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: Explorer.EXE, wersja: 6.3.9600.17284, sygnatura czasowa: 0x53f816dc Nazwa modułu powodującego błąd: SHELL32.dll, wersja: 6.3.9600.17331, sygnatura czasowa: 0x54023e8e Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x00000000000d4df0 Identyfikator procesu powodującego błąd: 0x8f8 Godzina uruchomienia aplikacji powodującej błąd: 0x01d04dafa44a6561 Ścieżka aplikacji powodującej błąd: C:\Windows\Explorer.EXE Ścieżka modułu powodującego błąd: C:\Windows\system32\SHELL32.dll Identyfikator raportu: b2b238cf-b9a4-11e4-826c-74e6e20f238c Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error - 2015-02-24 14:20:51 | Computer Name = Btn | Source = Application Error | ID = 1000 Description = Nazwa aplikacji powodującej błąd: inlaws.tmp, wersja: 51.1052.0.0, sygnatura czasowa: 0x506a75b5 Nazwa modułu powodującego błąd: inl.dll_unloaded, wersja: 0.0.0.0, sygnatura czasowa: 0x401c3031 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x00001dc6 Identyfikator procesu powodującego błąd: 0x1e40 Godzina uruchomienia aplikacji powodującej błąd: 0x01d0505d63ddd3db Ścieżka aplikacji powodującej błąd: C:\Users\Rafal\AppData\Local\Temp\is-KPHV8.tmp\inlaws.tmp Ścieżka modułu powodującego błąd: inl.dll Identyfikator raportu: dc439c21-bc51-11e4-826f-74e6e20f238c Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error - 2015-02-26 02:06:07 | Computer Name = Btn | Source = Microsoft-Windows-LocationProvider | ID = 2006 Description = There was an error with the Windows Location Provider database Error - 2015-02-26 17:37:39 | Computer Name = Btn | Source = Customer Experience Improvement Program | ID = 1008 Description = Error - 2015-02-27 07:00:42 | Computer Name = Btn | Source = Application Hang | ID = 1002 Description = Program Hearthstone.exe w wersji 2.2.0.8036 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum akcji w Panelu sterowania. Identyfikator procesu: 1794 Godzina rozpoczęcia: 01d0527c5be74994 Godzina zakończenia: 4294967295 Ścieżka aplikacji: C:\Program Files (x86)\Hearthstone\Hearthstone.exe Identyfikator raportu: dab2f772-be6f-11e4-8272-74e6e20f238c Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: Error - 2015-02-27 16:57:32 | Computer Name = Btn | Source = Customer Experience Improvement Program | ID = 1008 Description = Error - 2015-03-03 03:10:24 | Computer Name = Btn | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-03-03 03:10:29 | Computer Name = Btn | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-03-03 03:10:34 | Computer Name = Btn | Source = Microsoft-Windows-Immersive-Shell | ID = 5973 Description = Aktywacja aplikacji microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 nie powiodła się. Błąd: -2144927141. Więcej informacji można znaleźć w dzienniku Microsoft-Windows-TWinUI/Działa. Error - 2015-03-04 08:55:46 | Computer Name = Btn | Source = Application Hang | ID = 1002 Description = Program rads_user_kernel.exe w wersji 0.0.0.0 przestał współpracować z systemem Windows i został zamknięty. Aby sprawdzić, czy jest dostępnych więcej informacji na temat tego problemu, sprawdź historię problemu w aplecie Centrum akcji w Panelu sterowania. Identyfikator procesu: a08 Godzina rozpoczęcia: 01d0567a78775fc0 Godzina zakończenia: 1 Ścieżka aplikacji: C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe Identyfikator raportu: bd952bb3-c26d-11e4-8273-74e6e20f238c Pełna nazwa pakietu powodującego błąd: Identyfikator aplikacji względem pakietu powodującego błąd: [ System Events ] Error - 2015-02-24 06:23:31 | Computer Name = Btn | Source = DCOM | ID = 10010 Description = Error - 2015-02-24 06:24:01 | Computer Name = Btn | Source = DCOM | ID = 10010 Description = Error - 2015-02-24 08:09:36 | Computer Name = Btn | Source = DCOM | ID = 10010 Description = Error - 2015-02-24 08:10:06 | Computer Name = Btn | Source = DCOM | ID = 10010 Description = Error - 2015-02-24 11:10:58 | Computer Name = Btn | Source = Microsoft-Windows-Kernel-General | ID = 5 Description = Error - 2015-02-24 11:11:18 | Computer Name = Btn | Source = Microsoft-Windows-Kernel-General | ID = 5 Description = Error - 2015-02-24 14:15:59 | Computer Name = Btn | Source = Service Control Manager | ID = 7034 Description = Usługa Cyberlink RichVideo Service(CRVS) niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2015-02-24 14:18:09 | Computer Name = Btn | Source = Microsoft-Windows-Kernel-General | ID = 5 Description = Error - 2015-02-24 14:18:23 | Computer Name = Btn | Source = Microsoft-Windows-Kernel-General | ID = 5 Description = Error - 2015-02-25 11:54:55 | Computer Name = Btn | Source = EventLog | ID = 6008 Description = Poprzednie zamknięcie systemu przy 13:23:53 na ?2015-?02-?25 było nieoczekiwane. < End of report >